Static task
static1
Behavioral task
behavioral1
Sample
16112bcd2f2a6a87c0bef38bb8ce4321_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16112bcd2f2a6a87c0bef38bb8ce4321_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16112bcd2f2a6a87c0bef38bb8ce4321_JaffaCakes118
-
Size
57KB
-
MD5
16112bcd2f2a6a87c0bef38bb8ce4321
-
SHA1
d9fd46fac32ea041cbf93541b4b0e4bf956a3ad7
-
SHA256
84773a805ffdec75d21ffd518cd85ba081afb182e5e20e8fe29fd83a263a338d
-
SHA512
6bb47671960b36df5683143d4862492d106432869248c689aa330fe1baa6cbf97e5e9f31dd36b736437d4dfe4138b92b8f33de7f3a2b6159eecd3e4efbd15f6c
-
SSDEEP
1536:3RMaGs0zbvVa+kbjNbo+PrL56nrz0byoxl1CS2BAuhegz:BMaGfbvqH5QrApLH2vheS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16112bcd2f2a6a87c0bef38bb8ce4321_JaffaCakes118
Files
-
16112bcd2f2a6a87c0bef38bb8ce4321_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE